Struct CredentialPolicy 

pub struct CredentialPolicy {
    pub credentials: Vec<CredentialBinding>,
}

The complete credential section of a machine’s network policy.

Fields

credentials: Vec<CredentialBinding>

Bindings the machine may use, in declaration order.

Implementations

impl CredentialPolicy

pub fn is_empty(&self) -> bool

No bindings.

pub fn validate( &self, network_allowed_hosts: Option<&[String]>, ) -> Result<(), PolicyError>

Validate structure and, when the machine also restricts egress by hostname, require every credential host to be reachable under that allow-list. network_allowed_hosts = None means the machine’s network is not hostname-restricted; the credential’s own list still applies.

pub fn bindings_for_host<'a>( &'a self, host: &'a str, ) -> impl Iterator<Item = &'a CredentialBinding> + 'a

Bindings permitted to substitute toward host, in declaration order.

pub fn binding(&self, name: &str) -> Option<&CredentialBinding>

Look up a binding by name.

pub fn guest_env<'a>( &'a self, placeholders: &'a BTreeMap<String, String>, ) -> impl Iterator<Item = (String, String)> + 'a

Guest environment assignments (environment_variable, placeholder). Bindings without a placeholder are skipped; callers persist placeholders alongside the policy so this can never silently regenerate them.

Trait Implementations

impl Clone for CredentialPolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CredentialPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CredentialPolicy

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CredentialPolicy

where CredentialPolicy: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for CredentialPolicy

impl PartialEq for CredentialPolicy

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for CredentialPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CredentialPolicy